JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.136.25.219

45.136.25.219 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 22%: ?

22%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.136.25.219

Whois 45.136.25.219

IP Abuse Reports for 45.136.25.219:

This IP address has been reported a total of 13 times from 9 distinct sources. 45.136.25.219 was first reported on November 19th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tilellit.pro	2026-06-08 16:41:35 (5 days ago)	Fail2Ban banned 45.136.25.219 for security violations in jail wp-armour. Log: 2026/06/08 16:41:35 [e ... show more Fail2Ban banned 45.136.25.219 for security violations in jail wp-armour. Log: 2026/06/08 16:41:35 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.136.25.219 \| Target: wplogin" , client: 45.136.25.219, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 TPI-Abuse	2026-06-03 09:12:54 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 45.136.25.219 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.136.25.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 05:12:47.786138 2026] [security2:error] [pid 4242:tid 4242] [client 45.136.25.219:30955] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Lift Chairs/Lifestyle/Thumbs.db"] [unique_id "ah_wD71iMcVnrBe88JptQQAAABA"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Golden%20Technologies%202009%20Marketing%20CD/Lift%20Chairs/Lifestyle/ show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 relianoid.com	2026-05-28 07:47:32 (2 weeks ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇨🇭 backslash	2026-04-16 14:33:02 (1 month ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 OceanTreasure	2026-02-04 14:15:06 (4 months ago)	tcp/80; Cisco ASA SSL VPN vulnerability scan: "GET /+CSCOE+/logon.html" @ 2026-02-04T14:07:05Z [azur ... show more tcp/80; Cisco ASA SSL VPN vulnerability scan: "GET /+CSCOE+/logon.html" @ 2026-02-04T14:07:05Z [azure] show less	Brute-Force
🇺🇸 OceanTreasure	2026-02-03 13:45:05 (4 months ago)	tcp/80; Cisco ASA SSL VPN vulnerability scan: "GET /+CSCOE+/logon.html" @ 2026-02-03T13:23:37Z [azur ... show more tcp/80; Cisco ASA SSL VPN vulnerability scan: "GET /+CSCOE+/logon.html" @ 2026-02-03T13:23:37Z [azure] show less	Brute-Force
🇺🇸 OceanTreasure	2026-02-02 13:35:08 (4 months ago)	tcp/80; Cisco ASA SSL VPN vulnerability scan: "GET /+CSCOE+/logon.html" @ 2026-02-02T13:29:57Z [azur ... show more tcp/80; Cisco ASA SSL VPN vulnerability scan: "GET /+CSCOE+/logon.html" @ 2026-02-02T13:29:57Z [azure] show less	Brute-Force
Anonymous	2026-01-31 20:18:08 (4 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.31 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.31 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 Drall	2026-01-29 06:14:00 (4 months ago)	attemped sslvpn login using the username "admin"	Hacking Brute-Force Exploited Host
🇱🇻 garmtech.com	2025-12-27 22:09:38 (5 months ago)	IM360 WAF: Attempt to upload malware	Hacking
Anonymous	2025-12-23 18:05:45 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.23 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.23 is noted in report timestamp show less	Hacking Brute-Force
🇫🇷 masterguru	2025-12-23 11:04:24 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.136.25.219 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.136.25.219 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇨🇭 backslash	2025-11-19 13:10:07 (6 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 62.132.18.53

🇨🇳 221.10.42.66

🇮🇩 163.7.12.183

🇰🇷 119.196.155.220

🇹🇼 111.253.38.6

🇨🇳 14.155.240.49

🇨🇭 179.43.146.227

🇺🇸 172.253.2.28

🇩🇪 167.94.146.44

🇫🇷 146.70.194.220

🇩🇪 139.19.117.130

🇫🇷 135.125.2.200

🇻🇳 117.3.81.226

🇱🇹 62.60.130.14

🇺🇸 207.241.239.100

🇲🇽 187.191.48.23

🇻🇳 103.221.220.62

🇰🇷 14.63.196.175

🇬🇧 193.176.29.23

🇺🇸 185.88.103.23